{"id":"GO-2026-5089","revision":"61a061b8c72e456ba930499f23e088ae","records":[{"revision":"61a061b8c72e456ba930499f23e088ae","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5089","aliases":["CVE-2026-46410","GHSA-3jmg-p96m-m328"],"title":"FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser","description":"FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser","state":0,"publishedAt":"2026-06-25T18:26:48+00:00","modifiedAt":"2026-06-25T18:45:17.7237309+00:00","affected":[{"ecosystem":"Go","name":"github.com/gtsteffaniak/filebrowser","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.2.1-stable.0.20260514154726-1802e1281135"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/gtsteffaniak/filebrowser/backend","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260514154726-1802e1281135"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-3jmg-p96m-m328","https://github.com/gtsteffaniak/filebrowser/commit/1802e1281135cba83eb4acd86b58293fe121e2a5"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5089","license":"OSV · upstream source license applies","key":"osv:GO-2026-5089","identifiers":["GO-2026-5089","CVE-2026-46410","GHSA-3jmg-p96m-m328"]},"retained":false,"historicalAffected":[]}],"coverage":[]}